vector.yaml

sources:
  scratch_logs:
    type: "journald"
    include_units: ["scratchworker.service", "scratchdb.service"]

  init_logs:
    type: "journald"
    include_units: ["init.scope"]


transforms:
  scratch_transformed:
    type: "remap"
    inputs: ["scratch_logs"]
    source: |
      log, err = parse_json(.message)

      # Check if the JSON parsing was successful
      if is_object(log) {
          # JSON is valid and parsed successfully, so assign it to 'log'
          .log = log
      } else {
          # JSON is invalid, so assign the original string to 'log'
          .log = .message
      }
      del(.message)

sinks:
  scratch_motherduck:
    type: "http"
    method: "post"
    uri: "https://scratch-v2.fly.dev/data?table=logs&api_key=x"
    encoding:
      codec: "json"
    inputs: ["scratch_transformed", "init_logs"]